Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.mft
File: TStBlpVqQxU0D4J9mSoPeikoTD4.mft (raw, json)
Hash identifier: UscddBptVXWCt9omH1Sah2Zb1EprXSKSnsmkKB81qDU=
Subject key identifier: AF:09:B2:2F:FF:39:DE:31:30:06:A8:9F:72:E7:40:77:C7:8A:17:BC
Authority key identifier: 4D:2B:41:96:95:6A:43:15:34:0F:82:7D:99:2A:0F:7A:29:28:4C:3E
Certificate issuer: /CN=4d2b4196956a4315340f827d992a0f7a29284c3e
Certificate serial: 019D9A3DE9F4894F022B7F59AAE8D0D9A77C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TStBlpVqQxU0D4J9mSoPeikoTD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.mft
Manifest number: 1551
Signing time: Fri 17 Apr 2026 07:00:42 +0000
Manifest this update: Fri 17 Apr 2026 07:00:42 +0000
Manifest next update: Sat 18 Apr 2026 07:00:42 +0000
Files and hashes: 1: TStBlpVqQxU0D4J9mSoPeikoTD4.crl (hash: 10UVLQc9uuRUgWENq0QUMMwCeXmaUcpYLjzdPqZNbcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TStBlpVqQxU0D4J9mSoPeikoTD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e9:f4:89:4f:02:2b:7f:59:aa:e8:d0:d9:a7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2b4196956a4315340f827d992a0f7a29284c3e
Validity
Not Before: Apr 17 07:00:42 2026 GMT
Not After : Apr 18 07:00:42 2026 GMT
Subject: CN=af09b22fff39de313006a89f72e74077c78a17bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b1:b1:a0:a8:99:09:b5:25:9c:2f:1a:72:43:
3e:12:f0:06:80:14:e2:4c:30:93:0e:96:de:51:22:
f3:ae:e7:3c:80:98:02:87:4d:56:5d:e3:9a:07:12:
98:fa:18:2f:8e:d9:44:db:29:6f:56:81:f9:07:6a:
29:dc:79:30:26:33:09:fe:f6:0d:a0:6d:62:c0:bd:
fc:1b:33:22:3f:26:1e:e7:cc:fa:d0:60:9c:4d:ba:
48:c6:b8:83:5d:73:61:ad:61:16:e2:36:38:82:65:
eb:46:73:ec:a4:42:24:ec:17:48:e7:f2:8a:6e:78:
30:75:e6:6b:8f:be:47:13:77:e4:31:86:aa:6a:6c:
43:4c:33:d3:d6:18:da:20:8e:84:68:ea:fd:69:1c:
a5:45:24:44:fe:c9:1b:f8:fb:29:6d:52:dd:6f:82:
96:80:d5:47:cd:5d:29:b7:4b:c9:16:21:8b:29:b3:
e7:ba:c8:d6:24:31:b9:c6:ba:05:a7:fd:b2:d7:58:
aa:9d:dd:4f:6b:f0:04:5e:6b:b9:ac:0d:ca:2e:00:
35:77:fc:a8:12:df:d6:91:25:1d:c9:f7:68:e4:b8:
df:5a:4c:2b:11:cb:ff:15:63:a6:f4:83:e8:76:4d:
17:80:0f:83:5b:b6:20:51:d1:9b:5d:99:31:85:9f:
73:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:09:B2:2F:FF:39:DE:31:30:06:A8:9F:72:E7:40:77:C7:8A:17:BC
X509v3 Authority Key Identifier:
keyid:4D:2B:41:96:95:6A:43:15:34:0F:82:7D:99:2A:0F:7A:29:28:4C:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TStBlpVqQxU0D4J9mSoPeikoTD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:cf:38:f6:a6:a9:f4:96:19:0b:5f:c6:76:c4:b8:fd:23:cd:
f1:ad:81:b1:b5:cf:df:89:01:dd:c0:6c:d0:c0:13:b8:a7:c5:
ea:06:5b:0c:30:c3:d7:8b:98:05:ff:97:1d:03:99:e3:a6:e9:
bb:3a:0f:4f:42:d3:1a:f0:47:ed:6b:4d:bc:e7:5c:6a:9d:b8:
2b:48:0e:e0:a3:ea:f3:08:61:1c:7d:d5:84:7a:32:13:1c:49:
4e:b9:0d:2f:75:90:b2:75:b2:73:c1:d7:e1:54:98:b7:73:45:
e6:e7:30:84:69:c8:ff:8b:b8:53:61:e7:a6:d2:07:88:ab:b1:
57:9a:bf:8f:4d:13:c9:ea:7b:af:79:0b:41:e9:f3:31:d8:25:
d4:c6:d4:e2:a3:a4:00:a7:d2:68:94:9a:02:e1:57:c1:12:84:
03:6a:8d:11:e2:8c:2b:a4:5b:f3:4e:0e:fb:d8:2e:6d:89:d1:
1e:60:a6:ba:de:0e:e0:37:fc:8f:9c:85:88:a8:56:66:ec:05:
b9:45:b7:16:9d:63:b7:c3:ab:ac:ca:e1:c7:50:31:cc:43:0b:
2c:5b:20:16:ae:40:88:30:21:e8:f0:22:12:b8:9c:d7:51:58:
71:e2:76:13:b9:f9:1b:23:0a:a6:2f:de:32:df:af:52:9a:4b:
63:9a:50:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:23:01 2026 by rpki-client